OpenAI Agents SDK JavaScript v0.18.0
OpenAI Agents SDK JavaScript v0.18.0 migrates Docker file APIs to execute within containers, adds file I/O protection modes for UnixLocal, and adds an action parameter to imageGenerationTool.
Why this signal matters
OpenAI Agents SDK JavaScript version 0.18.0 introduces several updates to sandboxing and tools. The Docker file API has migrated to run completely inside the container rather than on the host. Consequently, container images must supply /bin/sh and GNU filesystem utilities (specifically realpath), operate under the default or explicit runAs user permissions, and enforce a 10 MiB limit on editor updates (larger changes require execCommand). Additionally, path grants require container resume or recreation to take effect. UnixLocalSandboxClient introduces an optional fileIOProtection setting ('auto' | 'required' | 'off') that utilizes Python-based file protection when present; this applies solely to file and editor operations, not host shell commands. The release also adds an action selection ('generate' | 'edit' | 'auto') to imageGenerationTool(), avoids redundant computer screenshots, recovers deferred tools during continuation, preserves sandbox workdirs for shell lists, and maintains agent response ownership in realtime sessions.
Actionable summary
OpenAI Agents SDK JS updated to v0.18.0. Breaking changes: Docker file APIs now run strictly inside containers requiring /bin/sh and GNU utilities (realpath), capping editor file sizes to 10 MiB, and requiring resume/recreation for new path grants. UnixLocalSandboxClient introduces fileIOProtection configurations, and imageGenerationTool adds action options ('generate', 'edit', 'auto').
- Agent usefulness
- 94/100
- Confidence
- 96%
- Canonical data
- JSON + Markdown
What builders should check
- Verify container images include /bin/sh and GNU filesystem utilities (notably realpath) if using Docker file APIs.
- Ensure editor file modifications in Docker sandboxes remain under 10 MiB or migrate to execCommand.
- Recreate or resume sandbox sessions after adding new path grants for Docker file APIs.
- Optionally configure fileIOProtection ('auto' | 'required' | 'off') when initializing UnixLocalSandboxClient depending on Python availability.